CVE-2014-0196: Linux Kernel Race Condition Vulnerability

KEV

Analyzed

AliasesRHSA-2014:0512RHSA-2014:0678UBUNTU-CVE-2014-0196+2 more

Published 07-05-2014Last modified 22-10-2025

Vulnerability summary

CVE-2014-0196 is a medium (CVSS 6.9) vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 12-05-2023. EPSS estimates a 20.33% chance of exploitation in the next 30 days, higher than 97.4% of scored vulnerabilities. 3 public exploits are recorded.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (12-05-2023)

Source freshness unavailable

How is this decided?

CVSS score

6.9/10

010

Medium · v2.0 (NVD)

EPSS score

20.33%

0%100%

High · -2.15 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits3github, reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 16 · Duplicates 1 · Related 1

DSA-2926-1 DSA-2928-1 MGASA-2014-0225 MGASA-2014-0226 MGASA-2014-0227 MGASA-2014-0228+11 more

Timeline

07-05-2014
PublishedVulnerability first disclosed.
12-05-2023
Added to CISA KEVExploitedLinux Kernel Race Condition Vulnerability
02-06-2023
CISA remediation dueDeadline passedThe impacted product is end-of-life and should be disconnected if still in use.
22-10-2025
Last modifiedVulnerability information updated.

Description

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

CVSS metrics

5 scores · 4 sources · 2 versions

v3.15.5v2.06.9

EPSS trend

Probability

20.33%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

Decrease -2.15 pp

From 22.48% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 12-05-2023
Federal due date: 02-06-2023

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

The impacted product is end-of-life and should be disconnected if still in use. lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html nvd.nist.gov/vuln/detail/CVE-2014-0196

Public exploits

3 found

githubUnverified
Linux
Maturity: poc
referenceUnverified
Exploit Reference (pastebin.com)
Maturity: unknown
exploit-databaselocallinux_x86-64Unverified
Linux Kernel 3.14-rc1 < 3.15-rc4 (x64) - Raw Mode PTY Echo Race Condition Privilege Escalation
Maturity: poc

Weaknesses

CWE · root cause

CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat29 products

enterprise_linuxEOL6.0
enterprise_linux_eus6.3 | 6.4
enterprise_linux_server_eus6.3
kernel< 0:2.6.32-279.43.2.el6 | < 0:3.10.0-123.1.2.el7
kernel-abi-whitelists< 0:3.10.0-123.1.2.el7

Show all 29

F520 products

big-ip_access_policy_manager≥ 11.1.0, ≤ 11.5.1
big-ip_advanced_firewall_manager≥ 11.3.0, ≤ 11.5.1
big-ip_analytics≥ 11.1.0, ≤ 11.5.1
big-ip_application_acceleration_manager≥ 11.4.0, ≤ 11.5.1
big-ip_application_security_manager≥ 11.1.0, ≤ 11.5.1

Show all 20

Suse3 products

suse_linux_enterprise_desktop11:sp3
suse_linux_enterprise_high_availability_extension11:sp3
suse_linux_enterprise_server11:sp3

Debian2 products

linux< 3.14.4-1
debian_linuxEOL6.0 | 7.0

Canonical1 product

ubuntu_linuxEOL10.04 | 12.04 | 12.10 | 13.10 | 14.04

Linux1 product

linux_kernel> 2.6.31, < 3.2.59 | ≥ 3.3, < 3.4.91 | ≥ 3.5, < 3.10.40 | ≥ 3.11, < 3.12.20 | ≥ 3.13, < 3.14.4 | 2.6.31 | 2.6.31:rc3 | 2.6.31:rc4 | 2.6.31:rc5 | 2.6.31:rc6 | 2.6.31:rc7 | 2.6.31:rc8 | 2.6.31:rc9

Oracle1 product

linuxEOL6

Ubuntu1 product

linux< 3.13.0-24.47

8 vendors · 58 products

References

51 links

www.ubuntu.com/usn/USN-2203-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
support.f5.com/kb/en-us/solutions/public/15000/300/sol15319.htmlX Refsource CONFIRMThird Party Advisory
www.osvdb.org/106646VDB EntryX Refsource OSVDBBroken Link
lists.opensuse.org/opensuse-security-announce/2014-05/msg00012.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.openwall.com/lists/oss-security/2014/05/05/6Mailing ListX Refsource MLISTThird Party Advisory
secunia.com/advisories/59262Third Party AdvisoryX Refsource SECUNIABroken Link
www.ubuntu.com/usn/USN-2204-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/59218Third Party AdvisoryX Refsource SECUNIANot Applicable
www.ubuntu.com/usn/USN-2202-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.exploit-db.com/exploits/33516ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry

Show all 51 references

www.debian.org/security/2014/dsa-2928Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.ubuntu.com/usn/USN-2199-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
linux.oracle.com/errata/ELSA-2014-0771.htmlX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=1094232X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
www.ubuntu.com/usn/USN-2197-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
source.android.com/security/bulletin/2016-07-01.htmlX Refsource CONFIRMNot Applicable
rhn.redhat.com/errata/RHSA-2014-0512.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/59599Third Party AdvisoryX Refsource SECUNIABroken Link
www.debian.org/security/2014/dsa-2926Vendor AdvisoryX Refsource DEBIANThird Party Advisory
github.com/torvalds/linux/commit/4291086b1f081b869c6d79e5b7441633dc3ace00X Refsource CONFIRMExploitPatchThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2014-05/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
pastebin.com/raw.php?i=yTSFUBgZX Refsource MISCExploitMailing ListThird Party Advisory
git.kernel.orgX Refsource CONFIRMBroken Link
bugzilla.novell.com/show_bug.cgi?id=875690X Refsource CONFIRMIssue TrackingPermissions RequiredThird Party Advisory
www.ubuntu.com/usn/USN-2198-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2200-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2201-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.ubuntu.com/usn/USN-2196-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2014-0196Government ResourceUS Government Resource
access.redhat.com/errata/RHSA-2014:0512Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0512.jsonAdvisory
access.redhat.com/security/cve/CVE-2014-0196REPORT
www.cve.org/CVERecord?id=CVE-2014-0196AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2014-0196Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLEREPORT
access.redhat.com/errata/RHSA-2014:0678Advisory
security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0678.jsonAdvisory
ubuntu.com/security/CVE-2014-0196REPORT
ubuntu.com/security/notices/USN-2196-1Advisory
ubuntu.com/security/notices/USN-2197-1Advisory
ubuntu.com/security/notices/USN-2198-1Advisory
ubuntu.com/security/notices/USN-2199-1Advisory
ubuntu.com/security/notices/USN-2200-1Advisory
ubuntu.com/security/notices/USN-2201-1Advisory
ubuntu.com/security/notices/USN-2202-1Advisory
ubuntu.com/security/notices/USN-2203-1Advisory
ubuntu.com/security/notices/USN-2204-1Advisory
ubuntu.com/security/notices/USN-2227-1Advisory
ubuntu.com/security/notices/USN-2260-1Advisory
security-tracker.debian.org/tracker/CVE-2014-0196Advisory